Overview

overview

10

Static

static

10

dfad4a9b02...fc.exe

windows7-x64

10

dfad4a9b02...fc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dfad4a9b0249c10c91f7fbdb470c9114df0041ca4c6e81bad5d56143dde80ffc

  • Size

    35KB

  • Sample

    240610-wymfeawdkl

  • MD5

    50a0c02a52185469176461d9c19f9833

  • SHA1

    0032e382cbc3546da2057a2e6cebc41534e96f94

  • SHA256

    dfad4a9b0249c10c91f7fbdb470c9114df0041ca4c6e81bad5d56143dde80ffc

  • SHA512

    c3a84aacf8445b75821fb426d9d9c4890eca275120234bdbe51eef14cac1347b1650b435b18943612603651e8c56443d51b1de9a653ded1a569c453a23ae683f

  • SSDEEP

    768:d6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:Q8Z0kA7FHlO2OwOTUtKjpB

Score
10/10
neconydtrojanupx

Malware Config

Extracted

Family

neconyd

C2

http://ow5dirasuek.com/

http://mkkuei4kdsz.com/

http://lousta.net/

Targets

    • Target

      dfad4a9b0249c10c91f7fbdb470c9114df0041ca4c6e81bad5d56143dde80ffc

    • Size

      35KB

    • MD5

      50a0c02a52185469176461d9c19f9833

    • SHA1

      0032e382cbc3546da2057a2e6cebc41534e96f94

    • SHA256

      dfad4a9b0249c10c91f7fbdb470c9114df0041ca4c6e81bad5d56143dde80ffc

    • SHA512

      c3a84aacf8445b75821fb426d9d9c4890eca275120234bdbe51eef14cac1347b1650b435b18943612603651e8c56443d51b1de9a653ded1a569c453a23ae683f

    • SSDEEP

      768:d6vjVmakOElpmAsUA7DJHrhto2OsgwAPTUrpiEe7HpB:Q8Z0kA7FHlO2OwOTUtKjpB

    Score
    10/10
    neconydtrojanupx

    • Neconyd

      Neconyd is a trojan written in C++.

      trojanneconyd

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks